$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a38b74a-85f6-3a52-87a5-368b3dfce939.roa File: 0a38b74a-85f6-3a52-87a5-368b3dfce939.roa (raw, json) Hash identifier: zIQX+hhBZ475/0fGranIkXltZRVHxNrkN0P9YQSY6bk= Subject key identifier: 37:A8:B8:F5:33:C5:2B:6B:20:49:E0:A5:D4:44:6F:50:27:5C:5B:D8 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F4F0827BD6199AC8E4D8CB3C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a38b74a-85f6-3a52-87a5-368b3dfce939.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 150.48.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:27:bd:61:99:ac:8e:4d:8c:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=b198e3f1-66f3-42af-a786-47622247acb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7e:03:68:81:68:41:4d:1a:fb:43:70:49:e8: 58:a8:ea:28:a1:5d:b9:bd:8e:c5:9d:6c:4a:82:fc: b4:74:b7:5d:1b:73:6a:84:9c:77:93:03:44:c5:e1: a0:24:96:62:90:a4:b3:90:37:f7:c0:7c:df:e2:fa: b0:6d:21:9e:f5:71:5c:62:13:de:5e:e6:96:7a:81: 22:6f:5d:9f:9a:9e:20:fd:1e:f9:62:c9:57:e0:32: d5:73:c2:60:f3:a5:77:e7:f7:29:4a:df:9b:16:24: 5f:fa:10:32:e1:ed:71:55:3f:35:84:31:79:90:93: 42:77:80:f7:8c:41:2a:61:49:50:16:de:9e:c8:d8: 7d:92:a1:d1:af:cc:b0:05:30:4a:3b:d8:00:1d:d1: 38:85:af:d9:b2:46:2b:bc:ca:6e:2d:8b:76:3a:42: 86:52:63:d1:7b:b5:b4:9c:72:2e:b0:63:3b:34:bc: 35:cd:bc:c1:da:d6:ab:51:5c:f2:a4:34:51:3e:56: fd:b4:06:49:0f:74:3e:e7:ae:35:81:dd:8c:11:37: 04:17:a6:2d:c4:06:7d:67:d3:a8:69:9f:11:fa:c5: 88:4e:5a:1f:2b:f8:2a:96:9c:f3:bd:dc:99:77:d4: 47:86:21:9d:a1:be:90:ea:97:18:97:c9:41:52:33: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A8:B8:F5:33:C5:2B:6B:20:49:E0:A5:D4:44:6F:50:27:5C:5B:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a38b74a-85f6-3a52-87a5-368b3dfce939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:dd:6c:2a:7b:df:31:48:43:8c:2a:f5:56:8c:a7:a7:a1:5f: 29:d2:a8:e2:5b:23:58:6a:3f:6e:69:9c:81:30:5b:74:77:ae: 3d:08:84:dd:c7:78:a0:ce:6f:1f:09:70:64:09:70:02:a4:18: 86:c9:fb:37:94:7d:c3:78:40:73:77:8d:35:2a:33:fc:4d:2a: c1:62:14:d4:92:36:c2:b0:b1:79:bf:f9:f9:a2:57:15:3f:3c: be:c0:3d:0c:0e:cb:59:57:80:d8:e7:e8:76:4c:4d:80:7a:9b: 31:22:fe:6e:93:2a:a3:27:ba:fb:f3:28:84:3a:eb:3c:71:b0: 03:cb:c1:9b:d6:92:01:49:e5:c8:0a:63:d2:f6:39:c9:dc:97: ac:a7:7e:b0:d2:ef:bd:47:55:6a:4c:8c:a5:2a:17:42:02:0f: f1:20:69:96:d4:0f:7d:55:b0:0c:ca:a4:7e:fc:79:16:52:68: 6c:70:e0:f9:88:c9:b8:20:6d:04:fd:82:c1:b4:87:46:60:ae: 42:5f:ed:9d:79:b6:27:ff:ab:e7:fa:79:72:d3:df:83:56:4b: 4b:17:04:a3:88:66:eb:f4:8c:77:7f:b4:b6:d3:c2:6d:5d:6e: 3b:78:f1:ec:9f:c5:61:94:cb:ee:2e:35:01:53:f8:13:24:91: ed:9e:02:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCCe9YZmsjk2Ms8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk YjE5OGUzZjEtNjZmMy00MmFmLWE3ODYtNDc2MjIyNDdhY2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH4DaIFoQU0a+0NwSehYqOoooV25vY7FnWxK gvy0dLddG3NqhJx3kwNExeGgJJZikKSzkDf3wHzf4vqwbSGe9XFcYhPeXuaWeoEi b12fmp4g/R75YslX4DLVc8Jg86V35/cpSt+bFiRf+hAy4e1xVT81hDF5kJNCd4D3 jEEqYUlQFt6eyNh9kqHRr8ywBTBKO9gAHdE4ha/ZskYrvMpuLYt2OkKGUmPRe7W0 nHIusGM7NLw1zbzB2tarUVzypDRRPlb9tAZJD3Q+5641gd2METcEF6YtxAZ9Z9Oo aZ8R+sWITlofK/gqlpzzvdyZd9RHhiGdob6Q6pcYl8lBUjNfEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeouPUzxStrIEngpdREb1AnXFvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMGEzOGI3NGEtODVmNi0z YTUyLTg3YTUtMzY4YjNkZmNlOTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDljCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjdbCp73zFIQ4wq9VaMp6ehXynSqOJbI1hqP25pnIEwW3R3rj0IhN3H eKDObx8JcGQJcAKkGIbJ+zeUfcN4QHN3jTUqM/xNKsFiFNSSNsKwsXm/+fmiVxU/ PL7APQwOy1lXgNjn6HZMTYB6mzEi/m6TKqMnuvvzKIQ66zxxsAPLwZvWkgFJ5cgK Y9L2Ocncl6ynfrDS771HVWpMjKUqF0ICD/EgaZbUD31VsAzKpH78eRZSaGxw4PmI ybggbQT9gsG0h0ZgrkJf7Z15tif/q+f6eXLT34NWS0sXBKOIZuv0jHd/tLbTwm1d bjt48eyfxWGUy+4uNQFT+BMkke2eAmU= -----END CERTIFICATE-----Generated at Sat Oct 17 23:50:41 2026 by rpki-client